pwn.watch: Mitel incident updates

[medium] Mitel SIP Phones: SIP Phones Argument Injection Vulnerability

Wed, 12 Feb 2025 00:00:00 GMT

Mitel 6800 Series, 6900 Series, and 6900w Series SIP Phones, including the 6970 Conference Unit, contain an argument injection vulnerability due to insufficient parameter sanitization during the boot process. Successful exploitation may allow an attacker to execute arbitrary commands within the context of the system. Added to CISA KEV on 2025-02-12.

Status: closed · Patch: patched · Fixed in: See vendor advisory linked in sources

Latest updates:

2025-02-12: CISA added CVE-2024-41710 to the KEV catalog (due 2025-03-05).

CVEs: CVE-2024-41710

[critical] Mitel MiCollab: 2 exploited vulnerabilities (CVE-2024-41713, CVE-2024-55550)

Tue, 07 Jan 2025 00:00:00 GMT

CVE-2024-41713: Mitel MiCollab contains a path traversal vulnerability that could allow an attacker to gain unauthorized and unauthenticated access. This vulnerability can be chained with CVE-2024-55550, which allows an unauthenticated, remote attacker to read arbitrary files on the server. CVE-2024-55550: Mitel MiCollab contains a path traversal vulnerability that could allow an authenticated attacker with administrative privileges to read local files within the system due to insufficient input sanitization. This vulnerability can be chained with CVE-2024-41713, which allows an unauthenticated, remote attacker to read arbitrary files on the server. Added to CISA KEV on 2025-01-07.

Status: closed · Patch: patched · Fixed in: See vendor advisory linked in sources

Latest updates:

2025-01-07: CISA added CVE-2024-41713 to the KEV catalog (due 2025-01-28).
2025-01-07: CISA added CVE-2024-55550 to the KEV catalog (due 2025-01-28).

CVEs: CVE-2024-41713, CVE-2024-55550

[medium] Mitel MiVoice Connect: 2 exploited vulnerabilities (CVE-2022-40765, CVE-2022-41223)

Tue, 21 Feb 2023 00:00:00 GMT

The Mitel Edge Gateway component of MiVoice Connect allows an authenticated attacker with internal network access to execute commands within the context of the system. The Director component in Mitel MiVoice Connect allows an authenticated attacker with internal network access to execute code within the context of the application. Added to CISA KEV on 2023-02-21. CISA lists known use in ransomware campaigns.

Status: closed · Patch: patched · Fixed in: See vendor advisory linked in sources

Latest updates:

2023-02-21: CISA added CVE-2022-40765 to the KEV catalog (due 2023-03-14).
2023-02-21: CISA added CVE-2022-41223 to the KEV catalog (due 2023-03-14).

CVEs: CVE-2022-40765, CVE-2022-41223